diff --git a/modules/oidc/src/main/scala/docspell/oidc/CodeFlowRoutes.scala b/modules/oidc/src/main/scala/docspell/oidc/CodeFlowRoutes.scala
index 531b0103..c0adcdd2 100644
--- a/modules/oidc/src/main/scala/docspell/oidc/CodeFlowRoutes.scala
+++ b/modules/oidc/src/main/scala/docspell/oidc/CodeFlowRoutes.scala
@@ -49,6 +49,7 @@ object CodeFlowRoutes {
                 CodeFlowConfig.resumeUri(req, cfg, config).asString
               )
               .withQuery("response_type", "code")
+              .withQuery("state", cfg.clientId)
             logger.debug(
               s"Redirecting to OAuth/OIDC provider ${cfg.providerId.id}: ${uri.asString}"
             ) *>
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
index 61c19cc5..fcbed931 100644
--- a/project/Dependencies.scala
+++ b/project/Dependencies.scala
@@ -11,7 +11,7 @@ object Dependencies {
   val CalevVersion = "0.6.3"
   val CatsVersion = "2.7.0"
   val CatsEffectVersion = "3.3.13"
-  val CatsParseVersion = "0.3.7"
+  val CatsParseVersion = "0.3.8"
   val CirceVersion = "0.14.2"
   val CirceGenericExtrasVersion = "0.14.2"
   val CirceYamlVersion = "0.14.1"
@@ -20,30 +20,30 @@ object Dependencies {
   val EmilVersion = "0.12.0"
   val FlexmarkVersion = "0.64.0"
   val FlywayVersion = "8.5.13"
-  val Fs2Version = "3.2.8"
+  val Fs2Version = "3.2.9"
   val H2Version = "1.4.200"
   val Http4sVersion = "0.23.13"
   val Icu4jVersion = "71.1"
   val JavaOtpVersion = "0.3.1"
-  val JsoupVersion = "1.15.1"
+  val JsoupVersion = "1.15.2"
   val JwtScalaVersion = "9.0.5"
   val KindProjectorVersion = "0.10.3"
   val KittensVersion = "2.3.2"
   val LevigoJbig2Version = "2.0"
   val Log4sVersion = "1.10.0"
   val LogbackVersion = "1.2.10"
-  val MariaDbVersion = "3.0.5"
+  val MariaDbVersion = "3.0.6"
   val MUnitVersion = "0.7.29"
   val MUnitCatsEffectVersion = "1.0.7"
   val OrganizeImportsVersion = "0.6.0"
   val PdfboxVersion = "2.0.26"
-  val PdfjsViewerVersion = "2.9.359"
+  val PdfjsViewerVersion = "2.12.313"
   val PoiVersion = "4.1.2"
   val PostgresVersion = "42.4.0"
   val PureConfigVersion = "0.17.1"
   val ScalaJavaTimeVersion = "2.4.0"
-  val ScodecBitsVersion = "1.1.31"
-  val ScribeVersion = "3.10.0"
+  val ScodecBitsVersion = "1.1.34"
+  val ScribeVersion = "3.9.0"
   val Slf4jVersion = "1.7.36"
   val SourcecodeVersion = "0.2.8"
   val StanfordNlpVersion = "4.4.0"